Privacy Policy

This policy explains what personal information ArbGen collects, why, and what we do with it. ArbGen is operated by [LEGAL ENTITY NAME] (ABN [ABN]). We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1. What we collect about you

Account information

• your name, email address and profile picture, received from Google or Microsoft when you sign in;
• which provider you signed in with, and that provider's identifier for you;
• your company logo, if you upload one.

We do not store passwords. Sign-in is handled entirely by Google or Microsoft.

Billing information

• your subscription plan and its status;
• a customer identifier issued by Stripe.

Card numbers are collected and stored by Stripe, not by us. We never see them.

Technical information

• server logs, including IP address, browser type and the pages you request;
• error reports, which may include the page you were on and the action you were taking when something failed.

2. What you put into ArbGen about other people

Projects you create typically contain information about people other than you: your client's name, the site address, and the contact details of the arborist, reviewer and approver named on the report. Photographs you upload may carry embedded location data, and may incidentally show people or property.

You decide what goes into a project. We hold and process it on your behalf so that we can generate your reports. We do not use it for our own purposes, do not sell it, and do not use it to train machine learning models. You are responsible for collecting that information lawfully and for telling the people concerned how it will be handled, as your own privacy obligations require.

3. Why we use it

• to run your account and let you sign in;
• to generate the maps, calculations and documents you ask for;
• to take payment and manage your subscription;
• to provide support when you ask for it;
• to keep the service secure, diagnose faults and improve it;
• to send you service messages about your account. We will not send marketing email without your consent.

4. Who we share it with

We disclose personal information only to the service providers we need to run ArbGen, and only for that purpose:

• Google and Microsoft — sign-in.
• Stripe — payment processing (United States).
• DigitalOcean — hosting. Your data is stored in [REGION — confirm].
• Sentry — error reporting, if enabled.
• Resend — transactional email.
• OpenTopography — elevation data. We send a site's coordinates, not your identity.
• Government spatial and planning services (for example Vicmap and the Victorian planning portal) — we send a site address or coordinates to retrieve zoning and overlay information.
• Basemap tile providers — we request map imagery for the area you are working in.

Several of these are located outside Australia, principally in the United States. By using ArbGen you consent to that disclosure. We otherwise do not disclose your information to anyone except where you ask us to, or where the law requires it.

5. How we protect it

• traffic to ArbGen is encrypted in transit (HTTPS);
• access to project data is restricted to the account that owns the project;
• administrative access to production systems is limited to [WHO — confirm];
• backups are taken [FREQUENCY — confirm] and retained for [PERIOD — confirm].

No online service can be perfectly secure. If a data breach occurs that is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

6. How long we keep it

We keep your projects for as long as your account is open. After an account is closed we keep the data for [30 — confirm] days so it can be recovered or exported, then delete it. Backups are overwritten on the cycle above. We keep billing records for as long as tax law requires.

7. Access, correction and deletion

You can view and correct most of your information in the application. To ask for a copy of what we hold, to correct it, or to have your account and its data deleted, email [PRIVACY EMAIL]. We will respond within 30 days. We do not charge for a reasonable request.

8. Cookies

ArbGen sets a session cookie to keep you signed in. It is necessary for the service to work. We do not use advertising or third-party tracking cookies.

9. Complaints

If you think we have mishandled your personal information, contact us first at [PRIVACY EMAIL]. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

10. Changes

We may update this policy. The date at the top shows when it last changed. If a change is material we will tell you by email or in the app.

11. Contact

[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
[PRIVACY EMAIL]